The domain druhub-market-links.digital has been classified as a phishing threat following its recent appearance on a security blocklist maintained by PhishDestroy. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain was created on July 25, 2026, and remains active as of July 28, 2026. DNS records confirm it currently resolves to IP address 188.114.97.3 with nameservers hosted by Cloudflare (adel.ns.cloudflare.com and javon.ns.cloudflare.com). While VirusTotal reports show that 91 vendors have scanned the domain with none currently flagging it, absence of detection in such databases is not definitive proof of safety.
No additional blocklist, Safe Browsing, OTX, or direct brand targeting intelligence is available at this time. The specific website content and phishing methodology employed by this domain have not yet been analyzed. Defenders should treat this domain as high-risk due to its blocklist presence, recent registration, and continuing operational status.
Monitoring for any activity associated with druhub-market-links.digital, including connections to 188.114.97.3, is advised. Security teams should consider proactive blocking and update filters to include this domain, pending the outcome of continued investigation. Any further evidence, such as SSL certificate details or HTTP response data, should be collected to inform ongoing incident response and domain tracking efforts.